VYPR
Vendor

Ptzoptics

Products
33
CVEs
4
Across products
49
Status
Private

Products

33
View all 33 products →

Recent CVEs

4
  • CVE-2024-8956CriKEVSep 17, 2024
    risk 0.76cvss 9.1epss 0.61

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and…

  • CVE-2024-8957HigKEVSep 17, 2024
    risk 0.65cvss 7.2epss 0.82

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956,…

  • CVE-2025-35452CriSep 5, 2025
    risk 0.64cvss 9.8epss 0.01

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

  • CVE-2025-35451CriSep 5, 2025
    risk 0.64cvss 9.8epss 0.01

    PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or…